Question No: 1

Server1 has IP Address Management (IPAM) installed. IPAM is configured to use the Group Policy based provisioning method. The prefix for the IPAM Group Policy objects (GPOs) is IP.

From Group Policy Management, you manually rename the IPAM GPOs to have a prefix of IPAM.

You need to modify the GPO prefix used by IPAM. What should you do?

Click Configure server discovery in Server Manager.

Run the Set-IpamConfiguration cmdlet.

Run the Invoke-IpamGpoProvisioning cmdlet.

Click Provision the IPAM server in Server Manager.

Answer: B Explanation:

The Set-IpamConfiguration cmdlet modifies the configuration for the computer that runs the IPAM server.

The -GpoPrefixlt;Stringgt; parameter specifies the unique Group Policy object (GPO) prefix name that IPAM uses to create the group policy objects. Use this parameter only when the value of the ProvisioningMethod parameter is set to Automatic.

Question No: 2

You need to ensure that the live migration traffic is authenticated by using Kerberos. What should you do first?

From Server Manager, install the Host Guardian Service server role on a domain controller.

From Active Directory Users and Computers, add the computer accounts for both servers to the Cryptographic Operators group.

From Active Directory Users and Computers, modify the Delegation properties of the computer accounts for both servers.

From Server Manager, install the Host Guardian Service server role on both servers.

Answer: C Explanation:

If you have decided to use Kerberos to authenticate live migration traffic, configure constrained delegation before you proceed to the rest of the steps.

To configure constrained delegation

Question No: 3

Your Network contains one Active Directory domain named contoso.com. You pilot DirectAccess on the network.

During the pilot deployment, you enable DirectAccess only for a group Contoso\Test

Computers.

Once the pilot is complete, you need to enable DirectAccess for all the client computers in the domain.

What should you do?

From Windows PowerShell, run the Set-DAClient cmdlet.

From Windows PowerShell, run the Set-DirectAccess cmdlet.

From Active Directory Users and Computers, modify the membership of the Windows Authorization Access Group.

From Group Policy Management, modify the security filtering of an object named Direct Access Client Setting Group Policy.

Answer: D

Question No: 4

You have two Hyper-V hosts named Server1 and Server2 that run Windows Server 2016. The following virtual switches are configured on the Hyper-V hosts.

The following virtual machines run on the Hyper-V hosts.

All virtual machines have IP addresses from the 192.168.1.0/24 network. VLANs are configured in Hyper-V only. Physical switches are not configured with VLANs.

To which virtual machine or virtual machines can VM1 connect?

VM2, VM3, VM5 and VM6 only

VM2, VM3 and VM4 only

VM2 only

VM2 and VM5 only

Answer: D Explanation:

If the port is set to a specific VLAN, then that port becomes a member of that VLAN. Its frames are still untagged, but the switch will only allow that port to communicate with other devices on the same VLAN.

Question No: 5 DRAG DROP

You install a new Nano Server named Nano1. Nano1 is a member of a workgroup and has an IP address of 192.168.1.10.

You have a server named Server1 that runs Windows Server 2016.

From Server1, you need to establish a Windows PowerShell session to Nano1.

How should you complete the PowerShell script? To answer, drag the appropriate cmdlets to the correct targets. Each cmdlet may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

Answer:

Explanation:

How to access Nano Server

Because Nano Server does not support a local session, it must be accessed remotely. References: https://msdn.microsoft.com/en-us/library/mt708805(v=vs.85).aspx

Question No: 6

Note: This question is part of a series of questions that use the same or similar answer choices. An answer choice may be correct for more than one question in the series. Each question is independent of the other questions in this series. Information and details provided in a question apply only to that question.

You have two servers named Server1 and Server2 that run Windows Server 2016. Server1 and Server2 have the Hyper-V server role installed.

An iSCSI SAN connects to the network.

You create a LUN on the SAN and configure both servers to connect to the iSCSI target.

You create a failover cluster and add Server1 and Server2 to the cluster. You connect both servers to the iSCSI target and format the shared storage.

You need to add the shared storage to the cluster. The solution must ensure that virtual machines running on both nodes can access the shared storage simultaneously.

Which tool should you use?

the clussvc.exe command

the cluster.exe command

the Computer Management snap-in

the configurehyperv.exe command

the Disk Management snap-in

the Failover Cluster Manager snap-in

the Hyper-V Manager snap-in

the Server Manager app

Answer: F Explanation:

References:

https://technet.microsoft.com/en-us/library/jj612868(v=ws.11).aspx

Question No: 7 HOTSPOT

Your network contains an Active Directory forest named contoso.com. You need to add a new domain named fabrikam.com to the forest.

What command should you run? To answer, select the appropriate options in the answer area.

Answer:

Explanation:

References:

https://technet.microsoft.com/en-us/library/hh974722(v=wps.630).aspx

Question No: 8

Note: This question is part of a series of questions that use the same or similar answer choices. An answer choice may be correct for more than one question in the series. Each question is independent of the other questions in this series. Information and details provided in a question apply only to that question.

You have a Hyper-V host named Server1 that runs Windows Server 2016. Server1 contains a virtual machine named VM1.

You need to ensure that you can use nested virtualization on VM1. What should you run on Server1?